15 files changed, 126 insertions, 0 deletions

diff --git a/systems/eldiron/websites/assets/default.nix b/systems/eldiron/websites/assets/default.nix
new file mode 100644
index 0000000..02a4952
--- /dev/null
+++ b/systems/eldiron/websites/assets/default.nix
@@ -0,0 +1,98 @@
+{ lib, pkgs, config, ... }:
+let
+  cfg = config.myServices.websites.tools.assets;
+  fetchFont = v: pkgs.runCommand "fetch-font" {
+    outputHashAlgo = "sha256";
+    outputHashMode = "recursive";
+    outputHash = v.sha256;
+  } ''
+    mkdir -p $out
+    ${pkgs.curl}/bin/curl -k --output $out/font.css -H "User-Agent: Firefox/100.0" "${v.url}"
+    cat $out/font.css | grep -o "https://[^ )]*" | while read url; do
+      filename=$(echo "$url" | sed -e "s@.*/@@g")
+      ${pkgs.curl}/bin/curl -k --output "$out/$filename" "$url"
+      sed -i -e "s@$url@./$filename@" "$out/font.css"
+    done
+  '';
+  fetchTgz = v: pkgs.runCommand "fetch-tgz" {
+    outputHashAlgo = "sha256";
+    outputHashMode = "recursive";
+    outputHash = v.sha256;
+  } ''
+    mkdir -p $out
+    cd $out
+    ${pkgs.curl}/bin/curl -L -k "${v.url}" | tar -xz --strip-components=${builtins.toString v.tgzRemoveComponents}
+  '';
+  fetchAsset = v:
+    if v.assetType == "googleFont"
+    then fetchFont v
+    else if v.assetType == "tgz"
+    then fetchTgz v
+    else pkgs.fetchurl { url = v.url; sha256 = v.sha256; };
+  assets_urls = lib.mapAttrs (k: fetchAsset) config.myEnv.tools.assets;
+  assets = pkgs.runCommand "assets" {} (''
+    mkdir -p $out
+    cp -a ${./static}/* $out/
+  '' + builtins.concatStringsSep "\n"
+    (lib.mapAttrsToList (k: v: ''
+      if [ -d "${v}" ]; then
+        mkdir -p "$out/$(dirname "${k}")"
+        cp -a "${v}" "$out/${k}"
+        chmod -R u+rwX "$out/${k}"
+      else
+        install -D -m644 -T "${v}" "$out/${k}"
+      fi
+    '') assets_urls));
+in
+{
+  options.myServices.websites.tools.assets = {
+    enable = lib.mkEnableOption "Enable assets website";
+  };
+  config = lib.mkIf cfg.enable {
+    myServices.dns.zones."immae.eu".subdomains.assets =
+      with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
+
+    services.websites.env.production.bindMounts."/run/imgproxy" = {};
+    security.acme.certs.eldiron.extraDomainNames = [ "assets.immae.eu" ];
+    services.websites.env.tools.vhostConfs.assets = {
+      certName = "eldiron";
+      hosts = [ "assets.immae.eu" ];
+      root = assets;
+      extraConfig = [
+        ''
+          Use Apaxy "${assets}" "title"
+          <Directory "${assets}">
+            Options Indexes FollowSymlinks
+            AllowOverride None
+            Require all granted
+            Header always set Last-Modified "Tue, 01 Jan 2020 00:00:00 GMT"
+            Header always set Cache-Control "public, max-age=31536000, immutable"
+            Header always set Access-Control-Allow-Origin "*"
+            Header always set Access-Control-Expose-Headers "*"
+          </Directory>
+
+          MergeSlashes OFF
+          <Location /p>
+            ProxyPass unix:///run/imgproxy/imgproxy.sock|http://assets.immae.eu
+            ProxyPassReverse unix:///run/imgproxy/imgproxy.sock|http://assets.immae.eu
+          </Location>
+        ''
+      ];
+    };
+    systemd.services.imgproxy = {
+      description = "IMG proxy";
+      wantedBy = [ "multi-user.target" ];
+
+      environment = {
+        IMGPROXY_NETWORK = "unix";
+        IMGPROXY_BIND = "%t/imgproxy/imgproxy.sock";
+      };
+      serviceConfig = {
+        User = "wwwrun";
+        Group = "wwwrun";
+        RuntimeDirectory = "imgproxy";
+        ExecStart = "${pkgs.imgproxy}/bin/imgproxy";
+      };
+    };
+  };
+}
diff --git a/systems/eldiron/websites/assets/static/favicon.png b/systems/eldiron/websites/assets/static/favicon.png
new file mode 100644
index 0000000..1caf5a4
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/favicon.png
diff --git a/systems/eldiron/websites/assets/static/logger.png b/systems/eldiron/websites/assets/static/logger.png
new file mode 100644
index 0000000..d9579fb
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logger.png
diff --git a/systems/eldiron/websites/assets/static/logger.txt b/systems/eldiron/websites/assets/static/logger.txt
new file mode 100644
index 0000000..50dccc6
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logger.txt
@@ -0,0 +1,3 @@
+Downloaded from https://commons.wikimedia.org/wiki/File:Ghost2.svg
+Licence Creative Commons Attribution-Share Alike 4.0 International
+https://creativecommons.org/licenses/by-sa/4.0/deed.en
diff --git a/systems/eldiron/websites/assets/static/logo.jpg b/systems/eldiron/websites/assets/static/logo.jpg
new file mode 100644
index 0000000..a89172d
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logo.jpg
diff --git a/systems/eldiron/websites/assets/static/logo.txt b/systems/eldiron/websites/assets/static/logo.txt
new file mode 100644
index 0000000..327e62a
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logo.txt
@@ -0,0 +1,7 @@
+size: 2
+dpi: 72
+background: white
+plot_type: fullcolor
+center: "whole"
+whitespace: 0.5
+format: jpg
diff --git a/systems/eldiron/websites/assets/static/logo_big.jpg b/systems/eldiron/websites/assets/static/logo_big.jpg
new file mode 100644
index 0000000..45448f2
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logo_big.jpg
diff --git a/systems/eldiron/websites/assets/static/logo_big.txt b/systems/eldiron/websites/assets/static/logo_big.txt
new file mode 100644
index 0000000..ce92c09
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logo_big.txt
@@ -0,0 +1,7 @@
+size: 4
+dpi: 72
+background: white
+plot_type: fullcolor
+center: "whole"
+whitespace: 0.5
+format: jpg
diff --git a/systems/eldiron/websites/assets/static/logo_center.jpg b/systems/eldiron/websites/assets/static/logo_center.jpg
new file mode 100644
index 0000000..6b177e0
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logo_center.jpg
diff --git a/systems/eldiron/websites/assets/static/logo_center.txt b/systems/eldiron/websites/assets/static/logo_center.txt
new file mode 100644
index 0000000..60a8f1c
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/logo_center.txt
@@ -0,0 +1,8 @@
+size: 4
+dpi: 72
+background: white
+plot_type: fullcolor
+center: "center"
+whitespace: 0.5
+format: jpg
+
diff --git a/systems/eldiron/websites/assets/static/monitoring.png b/systems/eldiron/websites/assets/static/monitoring.png
new file mode 100644
index 0000000..0024fee
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/monitoring.png
diff --git a/systems/eldiron/websites/assets/static/monitoring.txt b/systems/eldiron/websites/assets/static/monitoring.txt
new file mode 100644
index 0000000..9f3e13a
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/monitoring.txt
@@ -0,0 +1,3 @@
+Downloaded from https://commons.wikimedia.org/wiki/File:Magnifying_Glass2.svg
+Licence Creative Commons CC0 1.0 Universal Public Domain Dedication
+https://creativecommons.org/publicdomain/zero/1.0/deed.en
diff --git a/systems/eldiron/websites/assets/static/photos/ct.jpg b/systems/eldiron/websites/assets/static/photos/ct.jpg
new file mode 100644
index 0000000..ab7876b
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/photos/ct.jpg
diff --git a/systems/eldiron/websites/assets/static/photos/fretlink.jpg b/systems/eldiron/websites/assets/static/photos/fretlink.jpg
new file mode 100644
index 0000000..c941e1d
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/photos/fretlink.jpg
diff --git a/systems/eldiron/websites/assets/static/photos/raton.jpg b/systems/eldiron/websites/assets/static/photos/raton.jpg
new file mode 100644
index 0000000..a859e1c
--- /dev/null
+++ b/systems/eldiron/websites/assets/static/photos/raton.jpg